CVE Vulnerabilities

CVE-2025-54090

Incorrect Check of Function Return Value

Published: Jul 23, 2025 | Modified: Aug 14, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
4.8 MODERATE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Ubuntu
MEDIUM

A bug in Apache HTTP Server 2.4.64 results in all RewriteCond expr … tests evaluating as true.

Users are recommended to upgrade to version 2.4.65, which fixes the issue.

Weakness

The product incorrectly checks a return value from a function, which prevents it from detecting errors or exceptional conditions.

Affected Software

Name Vendor Start Version End Version
Http_server Apache 2.4.64 (including) 2.4.64 (including)
Apache2 Ubuntu devel *
Apache2 Ubuntu upstream *

Potential Mitigations

References